Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bc8KHJBcDwsHT5kTnrAPSmzjQ4g.roa
File: bc8KHJBcDwsHT5kTnrAPSmzjQ4g.roa (raw, json)
Hash identifier: FB9D19e77Q6WRXlqs3YfwS9HMB8jPu0RBF1FePYihhk=
Subject key identifier: 6D:CF:0A:1C:90:5C:0F:0B:07:4F:99:13:9E:B0:0F:4A:6C:E3:43:88
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B495B351C64A6F819D607AF69BF41F5FF
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bc8KHJBcDwsHT5kTnrAPSmzjQ4g.roa
Signing time: Thu 19 Oct 2023 19:13:15 +0000
ROA not before: Thu 19 Oct 2023 19:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Oct 2023 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:5b:35:1c:64:a6:f8:19:d6:07:af:69:bf:41:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 19 19:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dcf0a1c905c0f0b074f99139eb00f4a6ce34388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:4d:7f:c6:76:64:14:43:3b:c7:66:77:ba:
ae:55:81:10:d5:64:87:36:13:59:72:74:89:c1:29:
90:e0:78:f7:2c:d0:05:9a:a0:ee:a3:cf:e7:0d:67:
ee:61:d3:24:12:10:d8:f4:43:2d:da:25:df:23:75:
28:0d:d4:29:3f:dc:e2:55:dc:45:7f:fa:3e:5d:b9:
32:e7:e5:1a:5e:fe:ba:20:d2:96:29:f0:dd:c3:44:
00:33:57:16:45:35:6c:14:9a:e1:20:fc:8c:51:e1:
68:3b:28:18:51:f2:d3:5c:81:25:4b:e3:53:3a:ad:
ae:5c:81:17:95:5d:e5:4a:d6:9c:2b:1a:48:0c:11:
b8:5c:88:34:36:8a:66:27:88:c6:6d:7a:eb:4c:1c:
c0:5a:fd:ad:66:a6:61:c4:de:b0:31:db:64:7c:75:
ae:c7:88:6c:08:91:7b:95:0e:e3:c1:b1:7e:06:82:
21:c9:29:31:8c:24:17:14:b3:83:00:ec:10:50:c2:
2a:9b:95:e8:84:93:03:be:aa:4d:a0:9b:5f:d7:ae:
93:ea:c1:17:fe:45:30:e2:18:d1:0b:b7:b2:fb:0a:
01:86:0c:10:7b:bc:2b:90:51:14:07:91:28:5a:f8:
10:4c:69:b2:8b:e5:58:4c:cd:de:8e:27:9b:95:cd:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:0A:1C:90:5C:0F:0B:07:4F:99:13:9E:B0:0F:4A:6C:E3:43:88
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bc8KHJBcDwsHT5kTnrAPSmzjQ4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:f5:40:8b:0c:01:5e:e7:14:12:d3:9a:75:09:96:9e:5d:9a:
f0:02:60:39:43:41:d5:b6:bd:ed:9f:72:79:97:19:eb:35:8e:
71:64:a2:af:4d:ba:04:97:f7:72:16:f4:29:e4:69:ab:4e:2e:
fd:f3:c0:82:01:38:35:1a:1e:25:11:0c:20:8f:11:1a:90:45:
fc:88:76:d0:b9:cb:ad:bf:63:c8:47:22:16:54:a1:4e:f3:18:
04:26:db:2f:ba:c8:c6:8f:3e:6c:ac:1c:ec:05:a4:7b:72:0f:
0c:94:27:0f:6e:13:af:17:52:b6:a0:f3:52:fe:c6:00:ff:75:
1c:34:d4:97:6e:14:61:6b:9d:16:6d:db:ab:46:86:cd:49:11:
d1:b6:3c:41:9e:58:ef:35:e3:22:c7:e7:5d:e9:c5:e5:11:94:
e0:63:cf:7a:c1:85:33:50:2f:eb:02:49:50:29:70:7d:aa:ac:
83:b1:23:83:1e:ce:d1:a1:93:62:ec:fc:69:ae:76:82:7e:4a:
9d:1e:81:2a:e4:b8:3c:9b:77:55:e3:93:56:2b:b3:59:d2:4f:
e6:24:61:80:ba:74:a5:29:bd:b0:8b:fd:ad:e2:14:0a:d9:b4:
2e:b0:93:30:c8:a8:7b:aa:64:b5:da:ca:a2:55:19:55:ab:84:
fb:ba:f5:22
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYtJWzUcZKb4GdYHr2m/QfX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMxMDE5MTkxMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGNmMGExYzkwNWMwZjBiMDc0Zjk5MTM5ZWIwMGY0YTZjZTM0Mzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRRNf8Z2ZBRDO8dmd7quVYEQ1WSH
NhNZcnSJwSmQ4Hj3LNAFmqDuo8/nDWfuYdMkEhDY9EMt2iXfI3UoDdQpP9ziVdxF
f/o+Xbky5+UaXv66INKWKfDdw0QAM1cWRTVsFJrhIPyMUeFoOygYUfLTXIElS+NT
Oq2uXIEXlV3lStacKxpIDBG4XIg0NopmJ4jGbXrrTBzAWv2tZqZhxN6wMdtkfHWu
x4hsCJF7lQ7jwbF+BoIhySkxjCQXFLODAOwQUMIqm5XohJMDvqpNoJtf166T6sEX
/kUw4hjRC7ey+woBhgwQe7wrkFEUB5EoWvgQTGmyi+VYTM3ejieblc0/PwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG3PChyQXA8LB0+ZE56wD0ps40OIMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvYmM4S0hKQmNEd3NIVDVrVG5yQVBTbXpqUTRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZY0AwQA
LZY3AwQB1HN+MA0GCSqGSIb3DQEBCwUAA4IBAQCf9UCLDAFe5xQS05p1CZaeXZrw
AmA5Q0HVtr3tn3J5lxnrNY5xZKKvTboEl/dyFvQp5GmrTi7988CCATg1Gh4lEQwg
jxEakEX8iHbQucutv2PIRyIWVKFO8xgEJtsvusjGjz5srBzsBaR7cg8MlCcPbhOv
F1K2oPNS/sYA/3UcNNSXbhRha50WbdurRobNSRHRtjxBnljvNeMix+dd6cXlEZTg
Y896wYUzUC/rAklQKXB9qqyDsSODHs7RoZNi7PxprnaCfkqdHoEq5Lg8m3dV45NW
K7NZ0k/mJGGAunSlKb2wi/2t4hQK2bQusJMwyKh7qmS12sqiVRlVq4T7uvUi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org